# CWE-1299.

Every Advisory and CVE whose sources give the weakness CWE-1299, newest first.

## Records, newest first

- [An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the UART serial interface on the printed circuit board (PCB)](https://agentprime.io/advisories/CVE-2026-78862.md)
  `CVE-2026-78862` · CVE record · CVSS 6.8 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: CWE-1299
- [Intel(R) Platforms: Missing protection mechanism for alternate hardware interface in the Intel(R) Quick…](https://agentprime.io/advisories/CVE-2025-35998.md)
  `CVE-2025-35998` · CVE record: Intel(R) Platforms · CVSS 7.0 High · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-1220, CWE-1299
- [Shell access to UART Console](https://agentprime.io/advisories/CVE-2025-41697.md)
  `CVE-2025-41697` · CVE record: Phoenix Contact FL SWITCH 2005 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 9 Dec 2025 · Tags: CWE-1299
- [Panasonic IR Control Hub (IR Blaster): Panasonic IR Control Hub (IR Blaster) versions 1.17 and earlier may allow an attacker…](https://agentprime.io/advisories/CVE-2025-1073.md)
  `CVE-2025-1073` · CVE record: Panasonic IR Control Hub (IR Blaster) · CVSS 7.5 High · Not analysed yet · Published 10 Apr 2025 · Tags: CWE-1299
- [Access to Bootloader and Shell Over Serial Interface](https://agentprime.io/advisories/CVE-2025-26409.md)
  `CVE-2025-26409` · CVE record: Wattsense Wattsense Bridge · CVSS 6.8 Medium · Not analysed yet · Published 11 Feb 2025 · Tags: CWE-1191, CWE-1299
- [Missing Protection Mechanism for Alternate Hardware Interface](https://agentprime.io/advisories/CVE-2024-47944.md)
  `CVE-2024-47944` · CVE record: RITTAL GmbH & Co. KG IoT Interface & CMC III Processing Unit · CVSS 6.8 Medium · Not analysed yet · Published 15 Oct 2024 · Tags: CWE-1299
- [IBM FlashSystem denial of service](https://agentprime.io/advisories/CVE-2024-39723.md)
  `CVE-2024-39723` · CVE record: IBM Storage Virtualize · CVSS 4.6 Medium · Not analysed yet · Published 8 Jul 2024 · Tags: CWE-1299
- [Lack of DMA Access Protections](https://agentprime.io/advisories/CVE-2023-29063.md)
  `CVE-2023-29063` · CVE record: Becton, Dickinson and Company (BD) FACSChorus · CVSS 2.4 Low · Not analysed yet · Published 28 Nov 2023 · Tags: CWE-1299
- [Lack of USB Whitelisting](https://agentprime.io/advisories/CVE-2023-29060.md)
  `CVE-2023-29060` · CVE record: Becton, Dickinson and Company (BD) FACSChorus · CVSS 5.4 Medium · Not analysed yet · Published 28 Nov 2023 · Tags: CWE-1299
- [BD BodyGuard™ Pumps – RS-232 Interface Vulnerability](https://agentprime.io/advisories/CVE-2022-43557.md)
  `CVE-2022-43557` · CVE record: Becton, Dickinson and Company (BD) BodyGuard™ Pump · CVSS 5.3 Medium · Not analysed yet · Published 5 Dec 2022 · Tags: CWE-1299
- [Motorola Binatone Hubble Cameras: An exposed debug interface was reported in some Motorola-branded Binatone Hubble Cameras…](https://agentprime.io/advisories/CVE-2021-3788.md)
  `CVE-2021-3788` · CVE record: Motorola Binatone Hubble Cameras · CVSS 6.8 Medium · Not analysed yet · Published 12 Nov 2021 · Tags: CWE-1299

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-1299>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-1299/>. Everything for agents: <https://agentprime.io/llms.txt>.